Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
File:                     7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft (raw, json)
Hash identifier:          R4mbvNaO7N2W3tBsMaa54KOyqRdQdpwcS9oK9Sjvmhw=
Subject key identifier:   7E:EC:88:C7:09:90:34:B7:2F:73:9B:19:2D:C5:1E:C1:63:31:C4:12
Authority key identifier: 70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9
Certificate issuer:       /CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
Certificate serial:       201A4ACF7C888E7BE5FB660DFEC9CAB63D3A9C35
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
Manifest number:          0F
Signing time:             Tue 12 May 2026 16:51:34 +0000
Manifest this update:     Tue 12 May 2026 16:46:34 +0000
Manifest next update:     Wed 13 May 2026 17:02:34 +0000
Files and hashes:         1: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: B2JBhxZBgB0va+fccB3dL51mK3TG1i5CCqVPp24i9Qw=)
                          2: 7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl (hash: /T4zymMX5tSyR+dPYnNMvH152GrklXr/5IT7zy7BowI=)
                          3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: 4bKBlVxqedWSCh5v8weNHekAQ9GKb4xy7LR81Mjy5FE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl
                          rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:4a:cf:7c:88:8e:7b:e5:fb:66:0d:fe:c9:ca:b6:3d:3a:9c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7045262D5ECBD080FD7E90BD57C5CAC14767D7D9
        Validity
            Not Before: May 12 16:46:34 2026 GMT
            Not After : May 13 17:02:34 2026 GMT
        Subject: CN=7EEC88C7099034B72F739B192DC51EC16331C412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:57:29:81:70:00:be:77:da:e6:81:1a:5d:15:
                    6e:ee:f1:d6:4f:b6:51:8d:e0:39:ad:f2:4e:8a:bd:
                    91:8e:a7:87:66:d9:25:5c:ee:c4:b4:8a:77:4a:13:
                    56:8d:c0:4e:e3:07:78:cf:71:2a:69:3a:29:a5:09:
                    63:2c:f7:4d:ed:ac:bd:37:06:cb:ff:93:f9:1c:0e:
                    f8:64:92:4b:79:83:c9:0e:48:9f:09:d2:b5:d9:1e:
                    22:ab:af:bf:9b:37:fc:a1:24:41:24:7d:6a:bb:25:
                    f8:a6:07:aa:2f:0c:c4:4d:3d:ae:3a:1b:cc:92:c5:
                    0d:15:f5:b1:12:2d:f5:81:46:12:d7:43:93:ce:56:
                    3d:ba:54:04:1b:f6:52:c5:30:05:35:4a:3a:bd:bb:
                    8e:08:6e:9a:de:45:87:6d:4a:c3:0c:4b:cd:c6:8b:
                    d2:b4:71:71:f6:67:9e:42:1f:22:66:cd:f5:a0:b6:
                    65:39:e6:22:72:c0:72:13:97:05:52:55:7b:35:fd:
                    d2:8e:31:a5:5e:10:00:14:4d:e4:32:c2:94:42:e3:
                    9f:99:17:13:9c:9c:dd:78:7e:82:99:61:81:62:ef:
                    89:78:11:50:fe:15:ff:2b:6d:8d:1d:6e:14:33:4b:
                    82:8d:76:40:cc:fa:f2:1d:34:57:0d:79:29:a0:1c:
                    aa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:88:C7:09:90:34:B7:2F:73:9B:19:2D:C5:1E:C1:63:31:C4:12
            X509v3 Authority Key Identifier:
                keyid:70:45:26:2D:5E:CB:D0:80:FD:7E:90:BD:57:C5:CA:C1:47:67:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/7045262D5ECBD080FD7E90BD57C5CAC14767D7D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:d0:05:ae:6d:72:2f:fb:d7:9a:5e:a7:14:1d:d5:8a:4b:
         07:32:35:39:6f:08:ea:86:5a:5d:7e:6c:cf:1b:09:5b:24:17:
         ff:f5:d3:3b:3f:14:61:37:03:40:60:4e:00:ed:6b:81:67:07:
         50:7a:56:63:cf:5c:8b:55:3f:23:f0:97:71:76:0a:ac:fa:c6:
         51:4d:94:f3:ff:3b:90:46:fd:81:63:5a:c8:3f:eb:7a:f6:61:
         21:26:67:34:64:15:24:bd:67:cf:fe:ee:78:21:6f:df:a1:7f:
         0a:90:e1:f0:dd:2d:81:bf:27:38:d4:7d:d2:73:10:d3:98:a4:
         ff:24:cd:44:17:90:d5:7c:a2:eb:cc:1a:e6:1f:72:a3:89:bf:
         be:8d:e6:b9:a8:eb:e7:96:77:c9:de:7e:37:88:48:fc:45:ed:
         aa:61:cf:07:69:42:9e:10:7e:cc:7b:ef:e5:0a:34:5f:dc:cf:
         9b:6f:1c:b8:85:39:c3:0c:c7:62:a5:4f:e0:49:02:59:39:d5:
         c9:16:87:fe:ea:6c:e6:63:cf:c4:9a:40:52:8e:3b:e9:cf:f6:
         b6:d0:53:40:b3:35:95:24:94:d9:22:03:b3:f9:72:cf:62:ee:
         92:f4:e0:91:0b:a1:e6:b4:a6:5f:f2:ca:11:27:66:a3:ca:c1:
         b6:39:b8:23
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIBpKz3yIjnvl+2YN/snKtj06nDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA0NTI2MkQ1RUNCRDA4MEZEN0U5MEJENTdDNUNBQzE0
NzY3RDdEOTAeFw0yNjA1MTIxNjQ2MzRaFw0yNjA1MTMxNzAyMzRaMDMxMTAvBgNV
BAMTKDdFRUM4OEM3MDk5MDM0QjcyRjczOUIxOTJEQzUxRUMxNjMzMUM0MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuVymBcAC+d9rmgRpdFW7u8dZP
tlGN4Dmt8k6KvZGOp4dm2SVc7sS0indKE1aNwE7jB3jPcSppOimlCWMs903trL03
Bsv/k/kcDvhkkkt5g8kOSJ8J0rXZHiKrr7+bN/yhJEEkfWq7JfimB6ovDMRNPa46
G8ySxQ0V9bESLfWBRhLXQ5POVj26VAQb9lLFMAU1Sjq9u44IbpreRYdtSsMMS83G
i9K0cXH2Z55CHyJmzfWgtmU55iJywHITlwVSVXs1/dKOMaVeEAAUTeQywpRC45+Z
FxOcnN14foKZYYFi74l4EVD+Ff8rbY0dbhQzS4KNdkDM+vIdNFcNeSmgHKqDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfuyIxwmQNLcvc5sZLcUewWMxxBIwHwYDVR0j
BBgwFoAUcEUmLV7L0ID9fpC9V8XKwUdn19kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODAxYjc5YWMtMzM1MS00NzA1LThjM2QtNjAyYWRjZDc5YmI3LzAvNzA0NTI2MkQ1
RUNCRDA4MEZEN0U5MEJENTdDNUNBQzE0NzY3RDdEOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MDQ1MjYyRDVFQ0JEMDgwRkQ3RTkwQkQ1N0M1Q0FDMTQ3NjdE
N0Q5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj
M2QtNjAyYWRjZDc5YmI3LzAvNzA0NTI2MkQ1RUNCRDA4MEZEN0U5MEJENTdDNUNB
QzE0NzY3RDdEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEdt0AWubXIv+9eaXqcUHdWKSwcyNTlvCOqG
Wl1+bM8bCVskF//10zs/FGE3A0BgTgDta4FnB1B6VmPPXItVPyPwl3F2Cqz6xlFN
lPP/O5BG/YFjWsg/63r2YSEmZzRkFSS9Z8/+7nghb9+hfwqQ4fDdLYG/JzjUfdJz
ENOYpP8kzUQXkNV8ouvMGuYfcqOJv76N5rmo6+eWd8nefjeISPxF7aphzwdpQp4Q
fsx77+UKNF/cz5tvHLiFOcMMx2KlT+BJAlk51ckWh/7qbOZjz8SaQFKOO+nP9rbQ
U0CzNZUklNkiA7P5cs9i7pL04JELoea0pl/yyhEnZqPKwbY5uCM=
-----END CERTIFICATE-----
Generated at Wed May 13 02:15:27 2026 by rpki-client